RE: Netscreen IDP

[spy guy <spyguy703 () earthlink net>]

Actually, I am looking for a product similar to Netscreen's IDP product
as far as the LOG tools are concerned.

Check out the demo (not a sales pitch here...) that came with latest
info security magazine. 

I have too many snort sensors and I don't know what to do.

On Mon, 2002-10-21 at 07:47, Frank Knobbe wrote:
> On Sat, 2002-10-19 at 00:38, Alan Shimel wrote:
> >     -----Original Message----- 
> >     From: spyguy703 () earthlink net [mailto:spyguy703 () earthlink net] 
> >     Sent: Fri 10/18/2002 9:50 AM 
> >
> >     Does anyone on the list have any experience using Netscreen's IDP product? I
> >     looked at a demo yesterday and some of the marketing junk, but was wondering
> >     if anyone has actually bought the product and is using it.
> >     
> >     The technology (previously OneSecure) is of interest to me...especially the
> >     management/reporting software. (I really wish someone can duplicate this for
> >     SNORT!)
>
>
> If you are talking about having Snort block IP's on Netsreen, I just
> completed a plugin to SnortSam which does exactly that. A contributor
> and myself are working on the documentation right now and the plugin
> should be release within a day or two. Let me know if that is of
> interest to you and I'll alert you when the new version is released.
>
> Regards,
> Frank